Privacy

Who we are

Nota is a tool for South African businesses to make invoices and quotes, and keep receipts. It is operated from South Africa, and the Protection of Personal Information Act (POPIA) applies to everything here.

For anything about your information, including the requests below, contact us.

What we keep, and why

Your account. Your email address, your name if you give it, and — if you sign in with Google — the identifier Google gives us for your account. We use these to sign you in. There is no password to keep.

Your business. The details you put on your documents: its names, registration and VAT numbers, address, email, phone, bank details and logo. They are printed on your invoices and quotes, because the law or your customers need them there.

Your customers. The names, contact details, addresses and VAT numbers you enter, and the documents you issue to them. You decide what goes in. We use it only to make your documents and to show you who owes you. If a customer accepts or declines a quote through a link you send, we keep their answer and the name they type; we count how often a link is opened, but keep no addresses or device details.

Receipts. The photos and files you keep, and what is read from them. Your receipts are kept as records for your business.

Your phone. If you allow notifications, a notification token for your phone, so we can tell you when a customer answers a quote. The camera and your photos are used only when you take or pick a receipt or a logo.

Plans and payments. Which plan you are on and when it renews. When paid plans are on sale, card payments are taken by Paystack: we never see or keep your card number.

Who else sees it

Nobody buys or receives your information for advertising, and Nota shows no ads. Information leaves Nota only to do what you asked:

• Your customers see the documents you send them, with what is printed on them.
• People you invite to your business see its documents, customers and receipts.
• Microsoft Azure hosts Nota, in its South Africa North region: your information is stored in South Africa.
• Anthropic, when automatic receipt reading is switched on: the receipt’s image is sent to read the supplier, date and amounts. It is not used to train their models.
• Paystack, when you pay for a plan.
• Google, if you choose to sign in with it.
• Our support service, when something goes wrong: a report with what failed, your name, email address and business name, so we can help you. Never your customers’ details.

How long we keep it

For as long as you use Nota. Invoices and quotes you have issued, and receipts you have kept, are tax records: they cannot be deleted while the law requires a business to keep them — generally five years — even if you close your account. Nobody can sign in to a closed business to see them. When that period ends they will be deleted; until that is automatic, we delete them on request.

Your rights

You can ask what we hold about you, have it corrected, and have it deleted where the law allows. You can download everything your business has put into Nota from Settings → Your data, and delete your account yourself — see deleting your account.

If you are unhappy with how we have handled your information, you can complain to the Information Regulator (South Africa) at inforegulator.org.za.

If your business uses Nota for its customers

Your customers’ information is yours to process: you decide what to keep and why, and Nota processes it for you. If one of your customers asks you what you hold about them, the documents and customer record in Nota are where to look.